Deconstructing the Canvas (Instructure) Data Breach: What Happened and What Should Your Institution Do Next?
Canvas, a cloud-based education platform, was shut down by a cyberattack by ShinyHunters, who stole user data and attempted to extort Instructure.
On May 7, 2026, Canvas, a popular cloud-based education platform used by over 8,000 K-12 schools and higher education institutions across the United States, was shut down by a cyberattack. Universities, colleges and school districts across the country report being affected. The attack was perpetrated by a criminal hacking group known as ShinyHunters, who gained unauthorized access to the Canvas platform and stole a significant amount of user data before attempting to extort Instructure, Canvas’s... By: Bond Schoeneck & King PLLC